Chapter 5 done on cookies and sessions

includes some fiddling with URLS, to try and get them to go to the
right places